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^v^J ■ It is well understood that the use of quantum entanglement significantly enhances the 

' computational power of systems. Much of the attention has focused on Bell states and 

i their multipartite generalizations. However, in the multipartite case it is known that 

, there are several inequivalent classes of states, such as those represented by the W-state 

■ and the GHZ-state. Our main contribution is a demonstration of the special compu- 
^v^j ' tational power of these states in the context of paradigmatic problems from classical 

i distributed computing. Concretely, we show that the W-state is the only pure state 

, that can be used to exactly solve the problem of leader election in anonymous quantum 

■ networks. Similarly we show that the GHZ-state is the only one that can be used to 

solve the problem of distributed consensus when no classical post-processing is consid- 

' ered. These results generalize to a family of W- and GHZ-like states. At the heart of 

the proofs of these impossibility results lie symmetry arguments. 
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1 Introduction 

The use of quantum resources in computational tasks has led to a revolution in algorithms . 
Models of computation have been developed which serve as the basis for the design of quantum 
algorithms. In the present paper we study paradigmatic tasks - leader election and distributed 
consensus - from classical distributed computing [21 E] in the presence of quantum resources. 
Traditional algorithms are typically intended to establish an input-output correspondence; the 
main interest in quantum algorithms is in the use of quantum resources to reduce the time 
complexity of such algorithms. By contrast, our problems are about joint decision making by 
a group of autonomous agents. It is much closer in spirit to communication protocols. 

As with classical distributed algorithms a whole new arena for establishing impossibility 
results becomes available. The notion of "universality" commonly used in algorithms is not 
relevant here because that notion assumes that one can entangle any two (or more) qubits. In 
a distributed system one has resources in separated locations and one's actions are limited to 
what one can do in a particular region. One cannot just demand that a particular global se- 
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2 The Computational Power of the W and GHZ states 

quence of operations be carried out; it is necessary to arrange coordination - usually involving 
communication - between the agents acting at the separate locations (regions). Instead one 
has to ask what can be achieved within the limits of a particular computational model with 
communication and other limitations built in. In our case we study the quantum resources 
needed to carry out leader election and distributed consensus in anonymous networks. We 
focus on achieving these tasks exactly (to be defined precisely below) rather than probabilis- 
tically. The ultimate goal is understanding how information flows between different agents in 
a quantum setting. 

Leader election algorithms have been studied extensively in numerous papers and for many 
different network settings. In networks where processors have unique identifiers the symmetry 
is inherently broken via processor names 0J. By contrast, in an anonymous situation purely 
deterministic leader election is impossible: there is nothing that can break the symmetry if 
all the processors do the same thing If each process has a coin then they can elect a 
leader: for example they can each toss a coin and if they get a head they are the leader. 
Of course this is not guaranteed to work, there may be more than one leader or no leaders 
and the process will have to be repeated in the next round. This idea was first put forward 
in |2j and later generalized in [Jj]. With probability one this will terminate eventually but 
termination is not guaranteed. There is no bound on how long this process will take, though 
the expected number of rounds is just two. When two processors share a singlet state they 
can just measure it, such that the one who gets, say, one is the leader: this terminates in one 
step and always succeeds. How does this generalize to more than two processors? Is such a 
protocol possible within our framework? 

Our main result is that only very special shared quantum resources can be used to achieve 
the tasks at hand. More precisely, we show that in an anonymous network if the processors 
share the so-called W-state then a trivial protocol allows them to solve the leader election 
problem and, more importantly, this is the only possible shared pure state that allows one 
to solve this problem at all. Of course, if the processors are allowed to share mixed states, 
or even correlated classical random variables, then the leader election problem can also be 
solved. For example, one can imagine a setting in which all the parties are given a sealed 
envelope inside which it says if the party in possession of the envelope is the leader or not. 
If the correlations are set up so that only one leader is chosen, having each party opening 
its envelope elects a leader. This is essentially the way in which the W-state solves leader 
election too. However, we stress that the significant point is not that one can solve leader 
election with the W-state: what matters is that one cannot solve it with any other pure state. 
We note that our results differ from the work in jx], since there quantum communication is 
allowed to take place between parties. For completeness we also mention [H], which treats 
leader election for non-anonymous networks, and in particular aims at comparing a classical 
algorithm relying on randomization with its quantum counterpart. 

Distributed consensus is usually studied in a fault-tolerant context. In an asynchronous 
setting, there is no deterministic algorithm that solves distributed consensus even if only one 
processor crashes Processor failures can be detected in synchronous settings, so in this case 
Byzantine situations are considered, i.e. processors can be malicious. Several algorithms exist 
in this context, all tolerating up to one third of the processors being malicious. In a quantum 
setting, we find a trivial protocol which solves distributed consensus with no bound on the 
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number of Byzantine processors. Moreover, by similar techniques as for leader election we 
find that when ignoring classical post-processing, the GHZ-state is the only shared pure state 
that allows solution of distributed consensus. These are then essentially impossibility results: 
without these states a particular problem is not solvable in the sense that we make precise 
below. The proof uses the concept of symmetric configurations, and as such is similar to the 
work of Angluin. She writes that for anonymous networks "[••■] it seems intuitively that 
the behavior of the network can only depend upon the 'local appearance' of the underlying 
graph" . Our results are in the same vein, but with the symmetry breaking being dictated by 
the (non-local) properties of the shared entangled quantum state. The details of the proof 
are quite different, however. 

The structure of this paper is as follows. In Sec. [3 we define the particular framework 
in which our results are situated. Sec. |3| formalizes symmetry concepts within this setting, 
which are then used in the impossibility proofs of Sees. 01 and [5] concerning leader election 
and distributed consensus respectively. We conclude in Sec. [S] 

2 The model 

A distributed system is a system in which several inter-communicating parties carry out com- 
putations concurrently. While this definition is quite general, there are a whole series of 
specific implementations, depending on the communication structure, the degree of synchro- 
nization and the computational capabilities of individual processors. The setting of this paper 
is that of synchronous, anonymous, distributed quantum networks with broadcasts, where the 
network size is known. Let us clarify these terms. First of all, while each processor is allowed 
a quantum state as well as a classical state, the communication between processors remains 
classical? Classical and quantum states are assumed to be finite - in fact, throughout this 
paper we work with qubit states. Communication occurs via broadcasts, which means that all 
messages are sent out publicly to all processors along classical channels. Processors as well as 
communication are assumed to be non-faulty. So far this framework is very similar to what 
is known in as LOCC, for local operations and classical communication. 

In the anonymous setting, all processors are completely identical, that is they do not carry 
individual names with which they can be identified. As such the initial network specification 
must be invariant under permutations of processors. One of the implications thereof is that 
processors start out in identical local classical states. However, one has to carefully restate this 
when quantum states are allowed. Indeed, due to the phenomenon of quantum entanglement, 
the network quantum state is in general not a product state of individual (i.e. local) processor 
states. In this situation, the most sensible definition is to demand that the network quantum 
state is invariant under permutations of processor subspaces. This has as an immediate 
consequence that each processor has the same local view on its quantum state, i.e. the same 
reduced density matrix. Hence, we propose the following definition. 

Definition 1 An anonymous distributed quantum network is such that each processor p, 
where p £ {1, • • • , n} executes the same local protocol and has identical initial classical state, 
and furthermore that the initial network quantum state p G V>(^H.\ ® . . . (8> Tl n ) is invariant 
under any permutation of the processor subspaces TL\, . . . ,Tl n . In this case we call p an 
anonymous quantum state. 

"Initial qubits are distributed at the time the system is set up. 
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Note that anonymity implies that all Hi are identical. We denote the closure over all permu- 
tations of a state by Perm|^); for example Perm|001) = |001) + |010) + |100). 

Finally the system is synchronous, which means that a protocol proceeds in a sequence of 
rounds. During each round a processor receives messages that were sent to it in the previous 
round, performs a local operation, and then broadcasts messages. The local operation, which 
in general depends on received messages, consists of quantum operations followed by a classical 
post-processing stage, such that, because of anonymity, each processor has identical decision 
trees. 

We investigate distributed protocols within this framework, where we make one further 
distinction. 

Definition 2 A distributed protocol is called terminating if it reaches a terminal configuration 
in each computation, and partially correct if the goal of the protocol is achieved for each of 
the reachable terminal configurations. A protocol is totally correct if it is terminating and 
partially correct. 

Note that the above definition does not exclude the possibility of non-deterministic processes. 
In this paper we study totally correct leader election and distributed consensus protocols. 
For a leader election protocol, a correct terminating configuration is one in which there is 
exactly one leader in the state leader, while all other processes are in the state follower. In 
the case of distributed consensus, all processors should terminate with an identical bit value, 
which can be or 1 with equal probability. Probabilistic algorithms violate either termination 
or partial correctness. Probabilistic leader election algorithms are generally Las Vegas algo- 
rithms, that is, they terminate with positive probability and are partially correct, i.e. there 
are no reachable forbidden configurations. In the current literature, probabilistic algorithms 
come about by equipping each processor with a randomization tool, i.e. a random number 
generator or electronic coin. In our framework however, we allow only quantum operations 
and deterministic classical operations. Any qubit can of course be used to implement a coin 
toss. 

These definitions lead to the following propositions. 
Proposition 1 Any totally correct leader election protocol relying on pure states only requires 
prior shared entanglement. 

Proof, (outline) Without entanglement the network's quantum state is in a product state, 
and no entanglement can be created through LOCC operations 10. Therefore each processor 
is essentially equipped with a coin throughout the protocol. As a result, either termination or 
partial correctness is compromised, since there is a nonzero probability that local measurement 
results are identical □. 

Proposition 2 Totally correct leader election algorithms for anonymous quantum networks 
are fair, i.e. each processor has equal probability of being elected leader. 

Proof. Recall that the processor state is finite, i.e. each processor can be in one of finitely 
many classical states and has only a finite number of qubits. Moreover, with qubits quantum 
measurements can cause only finite branching. Hence there are only finitely many compu- 
tations, and we can argue combinatorially. Suppose then that by a terminating and correct 
computation configuration C is reached, wherein, say, process A is elected leader. Then there 
exists a corresponding configuration C in which process B is elected leader, by defining a 
permutation of processors a such that a (A) = B and running C on the permuted set of 
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processors. C is necessarily correct because of the anonymity of the network. This reasoning 
holds for arbitrary processors A and B in the network, hence there are equally many terminal 
configurations that elect each of the processors as leader respectively, and our result follows 
□ . 

The protocols described below are presented with respect to the computational basis. 
Specifically, quantum measurements occur within this same basis - this is in fact quite gen- 
eral since measurements in any other basis can be brought back to these by first applying 
the appropriate unitary transform in an anonymous way, i.e. locally and identical for all 
processors. We frequently denote basis states in their integer representation if the number 
of qubits is clear, for example 2} = 1 010) for a 3-qubit state. Normalization factors are 
suppressed throughout this paper because the crux of the argument will depend upon the 
symmetry rather than on the actual probability amplitudes. Furthermore, we only address 
symmetry-breaking capabilities of the quantum parts of our protocol. For leader election this 
does not diminish the strength of our result since it is known from Ref. [H] that classical proto- 
cols, and thus classical post-processing, cannot break the symmetry in anonymous networks. 
For distributed consensus a more nuanced assessment of our result is required. Unlike the 
situation with leader election - there are classical solutions but our quantum protocol is more 
fault tolerant. 

3 Symmetric moves 

In this section, we prove that certain types of superposition terms are potentially present 
throughout a computation. As we shall see below, this situation corresponds to a path of 
the computation in which a group of processors evolves symmetrically. We first define the 
notion of a k- symmetric move, which captures particular symmetry properties of a quantum 
state. We assume that this state is shared between processors, such that each of them owns 
m qubits. 

Definition 3 Suppose an n-partite state € Ti® n , where TL is a 2 m — dimensional Hilbert 
space, is distributed over n processors. We say that there exists a fc-symmetric move for the 
processors pi, . . . ,pk with respect to |"0), where < k < n, if for all complete sets of orthogonal 
projectors b {Pj,j — 1, . . . , J} on H, with < J < 2 m , there exist indices I, jk+i, ■ ■ ■ , jn € 
{1, . . . , J}, with ji ^ I for all i, such that 

n 

( p i)tL, Pk ( P n)M^0. (1) 

Note that for any state \ip) some incomplete measurements, for which J < 2 m , always result 
in more than k processors obtaining the same results, the trivial example being the identity 
projector. The point of Dcf. [31 is of course that it is a statement about all possible measure- 
ments. In particular, these are by no means restricted to measurements in the computational 
basis. 

The following lemma concretizes how we can recognize quantum states allowing /c-symmetric 
moves. 

b A complete set of orthogonal projectors is a set of projectors {Pj,j = 1, . . . , J} such that X*/=l ^j' = ^ an< ^ 

P P i — rS / P 
r 3 r j' — °33 r ] ■ 
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Lemma 1 There exists a k- symmetric move for the processors pi, . . . ,pk with respect to S 
7i®" if and only if for any basis {0,} 2 =1 ofH there exist indices I, jk+i, ■ ■ • , jn & { 1, . . . 2 m }-, 
with ji 7^ I for alii, such that, when expressing with respect to the basis {&}, the coefficient 
°f\<t>l)pt-,Pk ®i=k+l \<Pji) Pi is nonzero. 

Proof. In the proof below we assume, without loss of generality, that p\, . . . , pk are the first 
k out of n processors. 

| => | For an arbitrary basis {<f>i, i = 1, . . . 2 m } of TL we have that 

2 m 2 m n 

Using Def. with Pj = \<f>j){<f>j | for j = 1, . . . , 2 m , we find that there exist indices such that 

n 2 m 2" 1 n 

m(Mr k <s> (i^x^i)E-E a ^»®i^)^ ' ( 3 ) 

j = k+l ji=l jn = l i=l 

or in other words, we find that 

^ ■ ( 4 ) 
| <^ | For any set {Pj,j — 1, . . . , J}, construct the corresponding basis {\<fii), i — 1, ■ ■ ■ 2 m } by 
combining bases for the subspaces described by each of the Pj. With respect to this basis 
there exist indices l,jk+i, ■ ■ ■ , j n £ {1, . . . 2 m } such that the coefficient ai...ij k+1 ...j n in Eq.@ 
is nonzero. As a result, we find that (Pi)® k ® r > =k+1 (Pjt)\ip) ± 0, and therefore that there 
exists a fc-symmetric move with respect to □. 

For example, in a network with three processors, where each processor owns one qubit, 
the above lemma tells us that there exists a 2-symmetric move with respect to the state 
001) + 1 100) for the first two processors as well as the last two processors, but not for the 
first and the third processor. Likewise, in a network with two processors where each processor 
owns two qubits, there is a 2-symmetric move for both processors with respect to the state 

+ + + +), but not with respect to the state | + + H — ) + | + H h). Furthermore, only when 

TL = C 2 fc-symmetric moves imply (n — fc)-symmetric moves; for example, I- and (n — 1)- 
symmetric moves exist for all network states containing a term of the form II^O)®*-™" 1 ). 

Anonymous networks are by definition invariant under processor permutations, and there- 
fore a fc-symmetric move, if it exists, automatically exists for arbitrary subsets of k processors 
in the network. Because of this, we do not specify any particular subset of processors in what 
follows below. Concretely, in an anonymous setting the coefficients of all permutations of 
\(j)i)® k ®" =fe+1 are nonzero by the lemma above. 

In our setting, branching during a protocol occurs only due to measurement. If a fc- 
symmetric move exists fc processors may evolve symmetrically, by following that branch if 
which they all obtain identical measurement outcomes. In some protocol executions it is 
possible that subsequent branching continues to conserve the symmetry between fc processors 
in the above way. This leads to the following definition. 

Definition 4 A protocol has a fc-symmetric path if it there exists a protocol execution con- 
sisting of a sequence of k- symmetric moves. 
We then have the following result. 
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Proposition 3 Any anonymous distributed quantum protocol for which there exists a k- 
symmetric move initially has a k-symmetric path. 

Proof. Without loss of generality, we assume that local quantum operations during one 
round consist of an isometric operation U, i.e. a unitary operation along with creation of 
ancillae, followed by a measurement M. If Def. [3]holds for the initial network state \t/j), then 
it must hold for U®" \ip); indeed, after such an operation we again obtain a network state as in 
Lemma n Suppose that for the subsequent measurement M the protocol follows the existing 
fc-symmetric move, corresponding to identical measurement results j and projections on | </>■,). 
Knowing that classical post-processing cannot break symmetry in anonymous networks, in 
this case identical measurement results are broadcast, such that the local operations applied in 
the next round, depending on these results, are identical. Moreover, at this point the network 
state still allows a fc-symmetric move, since it contains a term of the form \4>j)® \4>j) ■ Then 
by induction we can construct a fc-symmetric path for the entire protocol □. 

Prop, lilies at the basis of the proofs in the rest of this article. It captures the conservation 
of symmetry properties for specific protocols, which is what we rely on to prove that only 
particular quantum resources allow an exact solution to the problems of leader election and 
distributed consensus below. 

4 Quantum leader election 
4-1 One qubit per processor 

In case that each processor owns exactly one qubit of some shared quantum state, we have 
the following important result. 

Theorem 1 A necessary and sufficient condition for a totally correct anonymous quantum 
leader election ( QLE) protocol, where each processor owns 1 qubit initially, is that processor 
qubits are entangled in a W-state. 

We prove this theorem in both directions below. 

W is sufficient. The idea is to share a specific entangled state between all parties, which 
allows one to break the symmetry in one step. The state used is known as the W-state, where 

n 

W n = J2 I 2 ") (5) 
J'=l 

For example W3 = 1 001) + 1 010) + 1 100) . This state can be used as a symmetry-breaking 
quantum resource. Each processor i carries out the following protocol. 

1 . q <— ith qubit of W„ 
b = 

result = wait 

2. b := measure q 

3. if b = 1 then result := leader 

else result := follower 
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This is a totally correct protocol with time complexity 0(1) and no message passing. c Note 
that the QLE protocol also works for different communication graphs or in asynchronous 
networks. 

W is necessary. For this part of the proof we use the tools from Sec. El Specifically, 
we prove that for certain types of superposition terms in the initial quantum state total 
correctness is compromised. 

Suppose P is an arbitrary protocol solving QLE. Then if P allows fc-symmetric paths with 
k different from 1 or n — 1 it is not totally correct. Indeed, for such a path P either does not 
terminate or it terminates in a forbidden configuration. Hence by Prop. EH the initial network 
state cannot allow fc-symmetric moves for fc ^ {l,n— 1}. By Lemma^with € (C 2 )® 71 
anonymous in the sense of Def. ^ this leaves us with W n , or unitary transforms thereof, as 
the only possibility. 

4-2 More qubits per processor 

One can repeat the same symmetry argument in the case where each processor has m qubits, 
i.e. H — C 2m . Taking {|</>i}} to be a basis for 7i, this leads to initial network states of the 
form 

2 ! 

|V)=^a i Perm|^ i )(g)|^,) (6) 

i=l j=2 

Here we need one extra ingredient: as before, each processor knows beforehand which mea- 
surement results lead to them becoming a leader. However, since up to m different results 
are possible the situation is slightly more complicated. So suppose C is spanned by the leader 
labels {\(j>i), i = 1, ■ ■ ■ , 2 ; } and T is spanned by the follower labels {|<At,)}- Then l^) cannot 
allow (fc > l)-symmetrical moves with respect to C, which means concretely that none of the 
\4>i) can appear in the tensor product in Eq.©, or in other words we take TL = C © T . Note 
that Eq. © includes the more stringent dual situation where n — 1 processors are symmetric 
with respect to T . A QLE protocol would then succeed by measuring \tj)), such that the pro- 
cessor obtaining a result in C appoints itself leader, while those obtaining results in T become 
followers. As a result, we obtain a family of W-like states as the only possible entanglement 
resources for totally correct anonymous QLE protocols. 

4-3 An instructive example 

The following example shows the drastic impact of anonymity on the success of a protocol. 
Suppose we have an odd number of processors n, and each processor carries out the following 
protocol^ 

1. q <- ith qubit of W 2 , n -2 =Perm|l)® 2 |0)® (n - 2) 
b = 

result = wait 

2. b := measure q 

c We could also have used the state W n , the complement of W n , to carry out the protocol; in this case the 
processor measuring |0) becomes the leader. 

d H is the Hadamard transform, defined by H\0) = |0> + |1> and H\l) = |Q> - |1>. 
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3. if b = 1 then result := candidate 

else result := voter 

4. if result = voter then b := measure H{q); 

broadcast b 

Because n is odd one of the candidates always gets more votes. However, in order to be able to 
appoint a leader, either the voters have to be able to name the candidate they voted for, or the 
candidates must differ in that they know which votes are intended for them. Both possibilities 
violate anonymity. Note however, that the above protocol would work when adapted for a 
network where the communication graph is a ring and the processors have a sense of direction. 
Indeed, suppose each candidate sends a message in say, the clockwise direction, such that the 
first candidate receiving this message proclaims itself the leader. This works because when 
n is odd both messages are ensured to arrive in different rounds. Both time and message 
complexity are in this case 0(n). 

5 Quantum distributed consensus 
5. 1 One qubit per processor 

The results in this section are similar in spirit to those for leader election, in that they also 
depend on a symmetry property. However, this time it is symmetry preservation rather 
than symmetry breaking which lies at the heart of the argument. One caveat is that we are 
considering a purely quantum solution to in this case. This is because with classical post- 
processing there are more ways to break the symmetry such that consensus is achieved, the 
most straightforward being to elect a leader and have the leader distribute a value to all other 
processors. Note however, that this clearly would not work in a fault-tolerant setting. In 
summary, we find the following result. 

Theorem 2 A necessary and sufficient condition for a totally correct anonymous purely 
quantum distributed consensus (QDC) protocol, where each processor owns 1 qubit initially, 
is that processor qubits are entangled in a GHZ-state. 

We prove this theorem in a similar manner as in Sec. 14.11 

GHZ is sufficient. The trick is to share a specific entangled state between all parties, 
which allows one to create symmetrical knowledge in one step. The state used is known as 
the GHZ-state, where 

GHZ n = |0)® n + (7) 

This state can be used as a symmetry-creating quantum resource. Each processor i carries 
out the following protocol below. 

1 . q <— ith qubit of GHZ n 
result = wait 

2. result := measure q 

This is a totally correct protocol with time complexity 0(1); no message passing is required. 
Note that the QDC protocol works as well for different communication graphs or in asyn- 
chronous networks, and, more importantly, in case an arbitrary number of processors is ma- 
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licious. This is in contrast with the classical case where an all protocols are resilient up to 
maximally n/3 faulty processors 

GHZ is necessary. Suppose P is an arbitrary protocol solving QDC. Then if P allows k- 
symmetric paths with k different n it is not totally correct. Indeed, any fc-symmetric path with 
k < n results in a non-zero probability that only k processors obtain symmetrical knowledge 
after the execution of P.. Thus neither partial correctness nor termination can be guaranteed, 
since either k processors terminate with different knowledge as the n — k others, or they do 
not terminate precisely because of this. Hence by Prop.|31 the initial network state \ip) should 
allow only n-symmetric moves. With 6 (C 2 )®" anonymous in the sense of Def. ^ this 
leaves us with GHZ n , or unitary transforms thereof, as the only possibility. 

5.2 More qubits per processor 

Again one can repeat the same symmetry argument in the case where each processor has m 
qubits. Taking to be a basis for Ti, this leads to initial network states of the form 



i=l 

An 2 m -valued QDC protocol would then consist of measuring this state. Again, requiring 
total correctness means that one cannot but use states of this type as a resource. 

6 Conclusion 

The main contribution of this paper is a demonstration of the special computational power 
of the W-state, and also of the GHZ-state, and generalizations thereof. A number of new 
results are established. First, totally correct leader election is trivially possible in anonymous 
quantum networks; by itself this is not a major point. Next, we prove that the specific 
entanglement provided by the W- and GHZ-states, and their generalizations, is the only kind 
that exactly solves leader election and purely quantum distributed consensus respectively. 
The W-state has been thought about less in quantum information theory than many other 
entangled states though it does possess remarkable properties m] . It is highly persistent [T^] 
for example, unlike GHZ-states it requires many more measurements on average to destroy 
the entanglement. 

In the programming languages community the relative power of synchronous vs. asyn- 
chronous process calculi were compared using symmetry breaking arguments: in fact on the 
ability to implement leader election |13| . The results of the present paper would have similar 
consequences on the expressive power of quantum process calculi. In joint work with others 
we are developing such calculi. 

One can and should study the role of the W-state more thoroughly. For example what can 
be done with a variant of the one-way model ^1] based on W-states? In this context, note 
that there is a difference between transformational computing, where one has some inputs 
and is interested in computing some output, and reactive computing, where the point of the 
algorithm is to implement a behavior. If one takes a distributed system where the individual 
agents share a W-state and represents this as a classical data structure one can simulate this 
efficiently classically. It is quite a different story to ask that a classical distributed system 



2 




(8) 
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exhibit the same behavior as a distributed system sharing an entangled quantum state. As we 
have seen, there is no way that a classical system can elect a leader. We are not saying that 
with the W-state we can write transformational quantum programs that cannot be simulated 
classically; we are saying that there are reactive behaviors that are absolutely impossible 
classically. 

There are possibly other quantum distributed algorithms using the W- state that cannot 
be emulated at all (let alone efficiently) using classical resources. Perhaps new fault-tolerant 
behaviors can be realized. We are actively investigating these and related questions. 
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